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CLAIMS 

1. A computer-implemented method comprising the following steps: 
creating a license pack at a license generator, the license pack containing a 

set of one oronore individual software licenses; 

signing the license pack with a digital signature of the license generator; 
issuing the\icense pack to a license server; 

verifying, at \e license server, the license generator's digital signature on 
the license pack; and 

distributing the software licenses contained in the license pack from the 
license server to corresponding clients. 

2. A computer-implemtented method as recited in claim 1, further 
comprising the step of creating a license pack containing a predefined number of 
software licenses. 

3. A computer-implemented method as recited in claim 1, further 
comprising the following steps: 

creating a license pack ID at the license geiterator; and 
evaluating the license pack ID at the license server. 

4. A computer-implemented method as recite^ in claim 1, further 
comprising the following steps: 

encrypting the license pack at the license generator; and 
decrypting the license pack at the license server. 
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A computer-implemented method as recited in claim 1, further 
comprising the^step of creating a license pack that is tailored to a particular 
operating platform of thexlients. 

6. A computer-implemenredsmethod as recited in claim 1, further 
comprising the step of determining an authenticity of an individual client prior to 
- distributing the s oftwar e license to that individual cm 



*\7. A computer-implemented method as recited in claim 1, further 
comprising the following steps: 

determining whether an individual client has a non-expired license; 

in the event that the client has a non-expired license, forwarding the non- 
expired license to thbindividual client; and 

in the event that th^ client does not have a non-expired license, granting one 
of the software licenses fromsthe license pack. 

8. A computer-implempfrfed method as recited in claim 7, further 
comprising the step of encrypting saieN^ne software license using a public key of 
the individual client. 

9. A computer-implemented method \s recited in claim 1, further 
comprising the step of evaluating whether an individual client already has a 
software license that has not yet expired. 
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A computer-implemented method as recited in claim 1, wherein the 
license pack has alT&ens^pack ID, and further comprising the step of granting 
additional licenses for the license^paekjiaying the same license pack ID. 



11. A computer-implemented method as recited in claim 1, further 
comprising the following steps: 

submitting an old software license from one of the clients to the license 
server, the old software license containing a license ID; 

determining^vhether an upgrade software license is available for the license 

ID; 

granting the upgraclfe Software license if available to the one client; and 



replacing, at the 
software license. 



one\client, the old software license with the upgrade 



12. A computer-implementecl method as recited in claim 1, further 
comprising the step of distributing a tempoi^ry license of in an event that no more 
licenses are available from the license pack. 



\13. A computer-implemented method for distributing software licenses 
to clients sb^iat the clients may legally execute underlying software to which the 
software licenses pertain, the computer-implemented method comprising the step 
of electronically issuing th^ software licenses as digital certificates that can be 
distributed in one-to-one correlation with individual clients and traced to an 
issuing authority. 
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14. A computer-readable medium having computer readable instructions 
^forming the step as recited in claim 13. 

15. \ computer-implemented method comprising the following steps: 
receiving a request for a software license from a particular license server; 
creating a license pack containing a set of one or more individual software 

licenses; \ 

assigning a license pacMD to the license pack; 

associating the license pacMD with the particular license server; 

digitally signing the license pabk; and 

issuing the signed license pack to the particular license server. 

16. A computer-implemented method, as recited in claim 15, further 
comprising the step of creating a license pack containing a predefined number of 
software licenses. \ 

17. A computer-implemented method as recited ik claim 15, further 
comprising the step of creating a license pack that includes \ platform type 
indicating a type of operating platform for which the software licensessean be used. 
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18. A computer-implemented method as recited in claim IS, further 
comprising the step of creating a license pack that includes a predefined number of 
software licenses, a platform type indicating a type of operating platform for which 
the software licenses can be used, an expiration date indicating a date on which the 
software licenses will expire, and a product ID that identifies a product with which 
the software licenses can be used. 



19. A computer-implemented method as recited in claim 15, further 
comprising the step of encrypting the license pack. 

20. A computer-readable medium having computer readable instructions 
for performing the steps as recited in claim 15. 

21. A computer-implementeXmethod comprising the following steps: 
receiving a request for a software lifcense from a particular client; 
determining an authenticity of the particular client; 

selecting a software license from a p^ck of software licenses that is 
appropriate for the particular client, the software^license having an associated 
license ID; 

associating the license ID with the particular client\and 
granting the software license to the particular client. 



Uc& Hayes. PLLC 



41 



MS# 110973 0318931S02 msl\197tu\MSl-197US.pat.app.tloc 





8 
9 

10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 

25 




22. 

comprising the step of 
expired license, and if so| 



computer-implemented method as recited in claim 21, further 
lining whether the particular client already has a non- 
/arding the non-expired license to the particular 




client rather than granting the software^ense 

!3. A computer-implemented method as recited in claim 21, further 
comprising the step of granting the software license as containing the license ID, a 
platform tyjte indicating a type the platform, an issue date indicates a date on 
which the license is issued to the client, an expiration date that indicates a date on 
which the software license will expire, a product ID that identifies a product with 
which the software licenses can be used, a client ID that identifies the particular 
client, and a version of the software license. 

24. A computer-implemented method as recited in claim 21, wherein the 
step of determining the authenticity comprises the following steps: 

receiving a client software ED from the particular client; and 
evaluating the client softwafe^ ID to determine whether the client is 
authentic. 

25. A computer-implemented methocl as recited in claim 2 1 , wherein the 
step of determining the authenticity comprises the tpllowing steps: 

maintaining a set of client images; 

receiving a client software ID from the particular dhent; and 
comparing the client software ID to the client image^ to evaluate whether 
the client is authentic. 
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26. A computer-implemented method as recited in claim 21, further 
comprising the following steps: 

deteimknng a platform of the particular client; and 

selecting tnb^software license as is appropriate for the platform of the 
particular client. 

27. A computer-implembnted method as recited in claim 21, further 
comprising the step of encrypting the ^a|tware license using a public key of the 
particular client. 

2S>^A computer-implemented method as recited in claim 21, further 
comprising the step oF^gr^^g a temporary software license that expires in a 
substantially shorter duratiorfin cofriparison to the software license. 

19. A computer-readable medium having computer readable instructions 
for performing the steps as recited in claim 2 1 . 

30. A comput^miplemented method comprising the following steps: 
computing a value as a one-way function of a client executable image that 

uniquely identifies a client; and 

digitally signing the value using a pnv^te signing key of a server that serves 

the client to create a client image digital signaturelimt is unique to the client. 
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31. A computer-implemented method as recited in claim 30, wherein the 
computing step comprises the step of hashing t^e executable image to produce a 
hash value. 

32. A computer-implemented method as recited in claim 30, further 
comprising the step of storing the client/image digital signature at the client. 

33. A computer-implemented method as recited in claim 30, further 
comprising the following steps: 

storing the client executable image at the server; 



storing the client image digital signature at the client; 
submitting the client/image digital signature from the client to the server 
when requesting a software license; and 

evaluating an authenticity of the client based on the client image digital 
signature prior to granting a software license to the client 

34. A computer-implemented method as recited in claim 33, wherein the 
evaluating step comprises the following steps: 

unsigning the client image digital signature using a public key of the server 
to recover the client executable image; and 

comparing the recovered client executable image to the client executable 
image stored a/ the server. 
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\35. A computer-implemented method as recited in claim 34, further 
comprising^the step of rejecting the request for a software license in an event that 
the recovered client executable image does not match the client executable image 
stored at the server. ' 
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36. A computer-readabl^medium having computer readable instructions 
for performing the steps as rebited in claifr*30. 

37^^ A computer-implemented method comprising the following steps: 
receiving a request for a software license from a client having a valid client 

image; 

submitting a challenge to the client, the challenge comprising a random 
number; 

computing, at the cliei[i|>^ function of the challenge and the client image to 
produce a response; 

returning the response to the servbr; 

deriving the client image from the response at the server; and 
verifying the client image at the servehjmor to granting the software 
license. 

38. A computer-implemented method as recited n^ claim 37, wherein the 
computing step comprises the following steps: 

concatenating the random number and the client ima^ to produce a 
concatenated value; and 

computing a hash function of the concatenated value. 
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A computer-implemented method as recited in claim 37, further 
comprising^the step of rejecting the request for the software license in the event 
that the client image cannot be verified. 

40. A computer-implemented method as recited in claim 37, further 
comprising the step of establishing a trust with the client and subsequently 
granting the software license in the event that the client image can be verified. 



41. Computer-readable media\iistributed at the server and the client 



having computer readable instructions for per: 
37. 



ing the steps as recited in claim 




42. A computer-implemented method comprising^e following steps: 
submitting an old software license from a client to a ser^r, the old software 
license containing a license ID; 

determining whether an upgrade software license is available fdKjhe license 

ID; 

granting the upgrade software license, if available, to the client; and 
replacing, at the client, the old software license with the upgrade software 
license. 
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43. A computer-implemented method as recited in claim 42, further 
comprising tH^tep of tracking at the server that the upgrade software license is 
granted to the client. 
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44. Computer-reVdablfc. media distributed at the server and the client 
having computer readable instructionSv|br performing the steps as recited in claim 
42. 

45. A^ystem for licensing software, comprising: 
a license generatol>t^ create a license pack containing a set of one or more 

individual software licenses, the^license generator digitally signing the license 
pack with a digital signature; and 

a license server remote from, but opetafryely coupled to, the license 
generator to receive the license pack from the license g^^rator, the license server 
verifying the license generator's digital signature on the licensfc^pack and storing 
the individual licenses for subsequent distribution to individual clients. 




46. A system 
assigns a license pack ID to the 
with the license server 




n claim 45, wherein the license generator 
pack and associates the license pack ID 




47. A system as Tetited^in claim 45, wherein the license generator 
encrypts the license pack using a public key olTtie-Ucgnse server. 
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48. A system as recited in claim 45, wherein the license pack contains a 
preset number onsoftware licenses. 

49. A system as recited in claim 45, wherein the license pack identifies a 
type of operating platform for which the software licenses can be used. 

50. A system as recited in claim 45, wherein the license pack comprises 
at least one of the following items: 

a predefined numberW software licenses; 

a platform type indicating a type of operating platform for which the 
software licenses can be used 

an expiration date that indicates a date on which the software licenses will 
expire; and 

a product ID that identifies \ product with which the software licenses can 
be used. 

51. A system as recited in claim 45, wherein the license server selects a 
software license from the license pack ana grants the software license to a client, 
the software license having a license ID apd the license server associating the 
license ID with the client. 

52. A system as recited in claim 45, wherein the license server 
challenges an authenticity of a client prior to granting a software license from the 
license pack to the client. 
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31 > 53. k system as recited in claim 45, wherein the license server grants a 
software license ^server to a particular client, the license server encrypting the 
software license usiiag a public key of the particular client. 

54. A system \s recited in claim 45, wherein the license server 
distributes the software licenses to the individual clients via one or more 
intermediate servers. 

55. A license generator for issuing packs of software licenses to 
authorized license servers, comprising: 

a request handler to receive \ request from a license server for a license 

pack; 

a license producer responsive to Ishe request received by the request handler 
to generate a license pack containing a\pt of one or more individual software 
licenses; and 

the license producer assigning a license pack ID to the license pack, 
associating the license pack ID with the license server, and digitally signing the 
license pack. 

56. A license generator as recited in claim 55, wherein the license pack 
contains a predefined number of software licensesAa platform type indicating a 
type of operating platform for which the software\ licenses can be used, an 
expiration date that indicates a date on which the software licenses will expire, and 
a product ID that identifies a product with which the software licenses can be used. 
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A liceits€^generator as recited in claim 55, wherein the license 
^r&ducer encrypts the license pack using a^uMie4te^pf the license server. 

58/V A license generator as recited in claim 55, further comprising a 
master licens^ciat^ license producer storing the license pack ID in 

correlation with an ID olHta license server in the master license database. 

9. Asprogram embodied on a computer-readable medium, comprising: 
a code segment to create a license pack containing a set of one or more 
individual software licenses; 

a code segment to assign a license pack ID to the license pack; 
a code segment to associate the license pack ID with the particular license 
server; and 

a code segment to digitally\ign the license pack. 

60. A license server for issiKiig individual software licenses from a 
software pack received from a licensing clearinghouse, comprising: 

a license store to store the software padc of individual software licenses, 
each software license having an associated license^ 

a request handler to receive a request for a softVare license from a client; 

a client authenticating module to determine whether the client is authentic 
and can receive a software license; and 

a granting module to grant a software license from the lib^nse store to an 
authenticated client and to associate the license ID with the authenticated client. 
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(^^61. ^license server as recited in claim 60, wherein the authenticating 
module determines an operatiiTg^latfpim of the client. 

62.\ A license server as recited in claim 60, further comprising: 



a client^ 
the client 
compares the rec 



ige 



five' 



cache to store a set of client images; and 
enticating module receives a client image from the client and 
client image to the set of client images to evaluate whether 



the client is authentic. 




/ / 63« Ashcense server as recited in claim 60, wherein the granting module 
crypts the software license using a public key of the authenticated client. 

64. A license server as recited in claim 60, wherein the software license 
contains at least one of the following items: 

a version indicator of a software license; 
a license ID; 

a client ID that identifies the authenticated client; 

an issue date on which the license is issued to the client; 

a platform type of the client's operating platform for which the software 
license can be used; 

an expiration date on which the software license wilKexpire; and 

a product ID that identifies a product with which the software licenses can 
be used. 



Lee & Hayes. PUC 



51 



MSP J 10973 0318981302 ms1\197tu\MSl-197US.pat.tipp.tioc 




* 



>5. "^-iice»se^§erver as recited in claim 60, further comprising a license 
fock table to store information pertainin^^ that is stored in the 

license store. 



i6. A, license server as recited in claim 60, further comprising a client 
assignmenh(able containing a list of the software licenses that are granted to 
clients. 

67. A license 'seWer as recited in claim 66, wherein the granting module 
upgrades the client assignment table after granting the software license to the 
authenticated client. 

1 y&8. Aerogram embodied on a computer-readable medium, comprising: 
a code seWent to receive a license pack from a license generator, the 
license pack contaimng a set of one or more individual software licenses; 
a code segmenVto validate the license pack; 
a code segment to\Store the software licenses; 

a code segment, responsive to a request for a software license from a client, 
to determine whether the clients authentic and can receive a software license; 

a code segment to grant aNsoftware license to an authenticated client, the 
software license containing a license ID; and 

a code segment to associate the lmense ID with the authenticated client. 

69. A client computer, comprising: 
a license cache to store one or more software licenses; 
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^ license requestor to request a software license from a license server; 

a challengevtoindler to handle an authenticity challenge from the license 
server, the challenge hanSle^computing a challenge response that contains a client 
image that can be 'used by the Ife^jise server to evaluate whether the client is 
authentic and can be licensed; and 

whereupon authentication by the license server and granting of a software 
license, the license requestor receiving the software licence from the license server 
and storing the software license in the license cache. 



70>\ A client computer as recited in claim 69, wherein the challenge 
contains a randbm dumber, and the challenger handler computes the challenge 
response by concatenating the random number with the client image to form a 
concatenated value and hashing the concatenated value. 




Aerogram embodied on a computer-readable medium, comprising: 
a code segmerJtsto receive an authenticity challenge from a license server 
that distributes software licenS 

a code segment to compute^SsChallenge response that contains a client 
image that can be used by the license seh^r to evaluate whether the client is 
authentic and can be licensed; and 

a code segment to store the software license granted^ the license server in 
an event that the client is deemed authentic. 
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data structure embodied on a computer-readable media, 

Dmpnsmg: 

a license p^ck table to record information pertaining to one or more license 
packs, the license pack table being indexed by license pack IDs that identify 
corresponding individual license packs, each license pack containing one or more 
software licenses; 

a client assignment table to record information pertaining to software 
licenses that are assigned to\elients, the client assignment table being indexed by 
license IDs that identify individual software licenses, the client assignment table 
further having the license pafck IDs of the license packs from which the 
corresponding software licenses alte issued; and 

the license pack table and the client assignment table being correlated via 
the license pack IDs contained in each table. 

73. A data structure as recite^ in claim 72, wherein the license pack 
table contains the following table fields: 

a license pack ID field to hold the licekse pack ID; 

a quantity field to hold a number rep\esentative of how many software 
licenses are contained in the license pack; 

a platform type field to hold a type of operating platform for which the 
software licenses in the license pack can be used; 

an expiration date field to hold a date on whicf^the software licenses in the 
license pack will expire; and 

a product ID field to hold a product ID that identifies a product with which 
the software licenses in the license pack can be used. 
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74. ^ data structure as recited in claim 73, wherein the license pack 
(able also contains\number assigned field to hold a number representative of how 
many of the software licenses have been assigned to clients. 



75. A data structure asVrecited in claim 72, wherein the client assignment 
table contains the following table fields: 

a license ID field to hold the licehse ID; 
a license pack ID field to hold the license pack ID; 

a client ID to hold an identifier of a client to which the software license is 
granted; and 

an issue date to hold a date on which the software license is issued to the 

client. 



76. ANicense pack data structure embodied on a computer-readable 
media comprising: 

a license pack ID fi&d to hold an identifier for an associated license pack 



that contains software licenses to%p 

a quantity field to hold a 
licenses are contained in the license 

a begin serial number to 
licenses contained in the license pack; 

an expiration date field to hold a date on whi&i the software licenses will 
expire; and 



fidually granted to individual computers; 
>resentative of how many software 

a beginning serial number of the software 
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software licenses can 




• 



• 




to hold data regarding the product with which the 



( Jll. A'Micense data structure embodied on a computer-readable media 
comprising: 

a version fiel& to hold a version indicator of a software license; 
a license ID field to hold an identifier for the software license; 
a client ID to hola an identifier of a client to which the software license is 
granted; 

an issue date to hold a date on which the license is issued to the client; 
an expiration date field toehold a date on which the software license will 
expire; and 

a product data field to hold o^ta regarding the product with which the 
software licenses can be used. 

78. A license data structure as recited in claim 77, further comprising a 
description field to hold a written description of the software license. 
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